n7bd Privacy Policy — How We Handle Your Personal Data

1. Introduction

n7bd ("we", "us", "our") is committed to protecting the privacy and personal data of every user who accesses or registers on the n7bd platform at n7bd.pro (the "Platform"). This Privacy Policy describes how we collect, use, store, share and protect your personal information in connection with your use of the Platform, including sports betting, live casino, slots, crash games and all related services.

By registering an account on n7bd or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not access or use the Platform.

3. What Personal Data We Collect

n7bd collects personal data in three ways: information you provide directly when registering or using the Platform, information generated automatically by your use of the Platform, and information received from third-party payment and verification service providers. The categories of personal data we collect are set out below.

3.1 Information You Provide Directly

• Registration data: your full name, Bangladesh mobile number, date of birth, and any other information you submit when opening your n7bd account or completing KYC verification.
• Identity documents: copies of your National ID card (NID), passport, or other government-issued identification document where requested during the KYC verification process or enhanced due diligence review.
• Payment information: your bKash, Nagad, Rocket or Upay mobile wallet number, or bank account details provided for the purpose of processing deposits and withdrawals in BDT. n7bd does not store full payment card numbers.
• Communications: any messages, enquiries or complaints you submit to n7bd support via live chat, email or any other contact channel, together with our responses.

3.2 Information Collected Automatically

• Technical data: your IP address, device type, device identifier, operating system version, browser type and version, mobile network operator (e.g. Grameenphone, Banglalink, Robi, Teletalk), and screen resolution.
• Usage data: pages viewed, games played, bets placed, betting markets accessed, session start and end times, features used, links clicked, and interaction patterns within the Platform.
• Transaction data: a full record of all deposits, withdrawals, bonus credits, wagers and game results associated with your account, including amounts in BDT, timestamps, and transaction reference numbers.

3.3 Information from Third Parties

• Payment processors: confirmation and reference data from bKash, Nagad, Rocket, Upay and our banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) to verify that deposits and withdrawals have been processed correctly.
• Identity verification providers: results of automated identity checks and document verification conducted by our KYC service providers to comply with our anti-money-laundering obligations.

5. Legal Basis for Processing

n7bd processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being processed.

• Contractual necessity: processing that is required to provide you with the services described in our Terms & Conditions, including account registration, bet placement, deposit and withdrawal processing, and customer support. Without this processing, n7bd cannot perform the contract it has with you.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC verification, anti-money-laundering checks, record-keeping obligations, and any reporting requirements imposed by relevant authorities.
• Legitimate interests: processing for the purposes of fraud prevention, Platform security, improving the quality and reliability of our services, responsible gaming monitoring, and communicating relevant service updates to you — where our legitimate interests are not overridden by your privacy rights.
• Consent: where you have given your explicit consent to a specific processing activity, such as receiving promotional communications from n7bd. You may withdraw your consent at any time by contacting support or adjusting your account preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

7. Payment Data and KYC Verification

n7bd processes all financial transactions exclusively in Bangladeshi Taka (BDT) via mobile wallet and bank transfer channels. When you initiate a deposit or withdrawal via bKash, Nagad, Rocket or Upay, your mobile wallet number is transmitted to that payment provider's API solely to initiate the transaction. n7bd retains a transaction reference number and the BDT amount for its own records. n7bd does not store your mobile banking PIN, bKash Personal Identification Number, or any equivalent authentication credential.

KYC verification is a mandatory step for all n7bd accounts before withdrawals above ৳10,000 may be processed, and for all accounts that have been active for more than 30 days. KYC documents submitted to n7bd are stored on encrypted servers and are accessible only to authorised n7bd compliance personnel. Copies of KYC documents are retained for the period required by applicable anti-money-laundering regulations, after which they are securely destroyed.

9. Your Rights Over Your Personal Data

As a user of n7bd, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]. n7bd will respond to all verified requests within 30 days. We may ask you to verify your identity before processing a rights request.

• Right of access: you have the right to request a copy of all personal data n7bd holds about you, free of charge. We will provide this in a commonly used digital format within 30 days of receiving your verified request.
• Right to rectification: if any personal data n7bd holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For simple corrections such as a misspelled name or an outdated mobile number, please update your account settings directly or contact support.
• Right to erasure: you have the right to request that n7bd delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal obligations to retain certain records under applicable anti-money-laundering and financial regulations.
• Right to restrict processing: in certain circumstances (for example, where you contest the accuracy of data we hold, or where you have objected to processing and we are assessing that objection), you have the right to request that we restrict our processing of your personal data to storage only, pending resolution of the issue.
• Right to object: you have the right to object to n7bd's processing of your personal data where that processing is based on our legitimate interests (for example, processing for direct marketing purposes or Platform personalisation). Where you object to direct marketing, n7bd will stop processing your data for that purpose immediately.

To exercise any of the above rights, contact our support team by email at [email protected]. Please include your registered mobile number and a description of the right you wish to exercise. n7bd will verify your identity before processing any rights request to protect against unauthorised access to your personal data.

11. Data Security

n7bd implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls limiting employee access to personal data on a strict need-to-know basis, multi-factor authentication for all administrative access to production systems, regular security audits and penetration testing, and an incident response procedure for data breach notification.